This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft File: 8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft (raw, json) Hash identifier: QwQ6VZMO9VPF+nw6zg2ZCv5D015pEXqyC+GEc1Gri4w= Subject key identifier: 60:D1:23:31:D6:FE:EB:13:DA:DD:62:F0:D7:07:F1:33:15:2E:C3:D3 Authority key identifier: 8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E Certificate issuer: /CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Certificate serial: 1E09A544AFDFE56C93BA67ECED498339B4386398 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft Manifest number: 01B9 Signing time: Sat 06 Dec 2025 12:31:28 +0000 Manifest this update: Sat 06 Dec 2025 12:26:28 +0000 Manifest next update: Tue 09 Dec 2025 18:56:28 +0000 Files and hashes: 1: 8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl (hash: GAASqMNeqsLkKZoipDIEuiU0gud/rrFdYEUKUG7hAg8=) 2: 3130332e3137392e3235322e302f32332d3233203d3e20313439333530.roa (hash: SOLno68sPPJ1WEP8d6UDWvS0+ZdY5j1GxBVKsZxB5cY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:09:a5:44:af:df:e5:6c:93:ba:67:ec:ed:49:83:39:b4:38:63:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Validity Not Before: Dec 6 12:26:28 2025 GMT Not After : Dec 9 18:56:28 2025 GMT Subject: CN=60D12331D6FEEB13DADD62F0D707F133152EC3D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4d:2a:93:f2:8f:57:63:91:d8:e7:1a:31:7b: 07:5e:40:6d:58:aa:18:15:68:09:56:ca:c4:96:47: 2f:fe:39:cf:e1:62:e4:3a:5b:50:6e:bb:9a:63:f2: 9d:70:32:10:41:9d:05:16:86:74:4b:35:a1:3a:9f: 72:77:c5:bc:61:98:62:b4:40:a9:e0:eb:9c:97:d3: ef:9e:a1:19:8d:32:f7:e2:f1:b0:25:a4:12:59:31: bd:91:b6:4d:31:59:9b:b7:b1:79:98:b3:2f:32:59: 7f:19:2f:cf:21:fb:21:15:9d:c2:7d:d8:1f:41:d4: 78:b2:9b:42:f0:d9:a1:f1:83:42:8c:39:5f:4b:6e: 26:a9:11:c4:ab:2f:ba:e9:c9:e1:12:fe:83:9f:e4: 6e:fb:28:de:00:08:16:56:29:9a:0a:d4:ad:c9:2f: 54:61:33:3a:5b:ae:61:dd:b7:60:91:bd:69:ee:40: 6b:2d:0e:22:06:a4:f2:0e:70:22:3f:f5:15:31:c0: 85:81:f9:20:71:7f:ae:d2:f1:2d:9e:c8:24:c9:ff: d5:b3:3a:2d:06:43:84:cc:66:64:65:2c:d1:0b:0e: 49:b7:c0:0c:7b:eb:b9:e9:be:e2:2c:07:4c:a8:6b: 64:9e:33:bc:00:f8:63:a1:16:ba:e7:04:0c:ca:3e: 5a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D1:23:31:D6:FE:EB:13:DA:DD:62:F0:D7:07:F1:33:15:2E:C3:D3 X509v3 Authority Key Identifier: keyid:8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:c9:41:ed:f5:71:71:4b:16:d8:9d:a1:e5:35:dc:fa:59:d4: 88:41:ff:c9:0b:21:bf:7d:e2:35:d8:c2:7e:4d:3f:b8:85:4c: b0:15:34:a4:62:54:d7:6d:8a:56:e2:64:b0:2d:2f:45:50:05: fd:9b:94:09:f7:ca:f6:07:8d:be:5c:e7:8d:b1:4b:ba:7a:99: 29:f1:ea:5c:73:6b:d0:87:00:3a:a2:88:23:ab:7e:9f:1b:ad: f7:2a:ef:c9:41:15:35:e1:73:6f:e0:26:88:ef:a9:6f:1e:4d: 78:6b:85:27:4c:59:66:79:17:b4:71:f9:54:2b:04:03:82:79: b3:37:97:15:53:08:32:8e:c2:36:3b:3d:8e:dd:4a:17:7a:73: 2d:85:58:7c:26:a4:e7:0f:af:56:e2:b9:ca:45:47:e9:1c:aa: 1d:83:03:52:30:0e:c1:69:6d:6c:b1:45:70:56:2b:ab:47:82: 80:75:39:89:36:ab:ae:e8:0b:52:3e:41:93:32:27:fc:cf:6a: 2a:5b:91:02:4d:7a:af:44:26:7e:de:b3:ed:0c:e5:e7:c3:ce: a4:b4:96:4e:64:cf:22:49:3e:1e:b3:4f:7c:94:24:c0:ea:b4: b7:c4:ba:4a:36:83:e6:e4:20:4c:e9:a3:3e:3b:48:5b:b8:01: 7f:4b:62:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHgmlRK/f5WyTumfs7UmDObQ4Y5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVENjZF NEI1Q0YyRTAeFw0yNTEyMDYxMjI2MjhaFw0yNTEyMDkxODU2MjhaMDMxMTAvBgNV BAMTKDYwRDEyMzMxRDZGRUVCMTNEQURENjJGMEQ3MDdGMTMzMTUyRUMzRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXTSqT8o9XY5HY5xoxewdeQG1Y qhgVaAlWysSWRy/+Oc/hYuQ6W1Buu5pj8p1wMhBBnQUWhnRLNaE6n3J3xbxhmGK0 QKng65yX0++eoRmNMvfi8bAlpBJZMb2Rtk0xWZu3sXmYsy8yWX8ZL88h+yEVncJ9 2B9B1Hiym0Lw2aHxg0KMOV9LbiapEcSrL7rpyeES/oOf5G77KN4ACBZWKZoK1K3J L1RhMzpbrmHdt2CRvWnuQGstDiIGpPIOcCI/9RUxwIWB+SBxf67S8S2eyCTJ/9Wz Oi0GQ4TMZmRlLNELDkm3wAx767npvuIsB0yoa2SeM7wA+GOhFrrnBAzKPlpHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYNEjMdb+6xPa3WLw1wfxMxUuw9MwHwYDVR0j BBgwFoAUistSCw4t5mzlKLgNpqXtZuS1zy4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODViZmY0MS0yNDIwLTQyYjEtOWI4My1kNDFjMTgwNDNkNjUvMC84QUNCNTIwQjBF MkRFNjZDRTUyOEI4MERBNkE1RUQ2NkU0QjVDRjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVENjZFNEI1 Q0YyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzg1YmZmNDEtMjQyMC00MmIxLTli ODMtZDQxYzE4MDQzZDY1LzAvOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVE NjZFNEI1Q0YyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJTJQe31cXFLFtidoeU13PpZ1IhB/8kLIb99 4jXYwn5NP7iFTLAVNKRiVNdtilbiZLAtL0VQBf2blAn3yvYHjb5c542xS7p6mSnx 6lxza9CHADqiiCOrfp8brfcq78lBFTXhc2/gJojvqW8eTXhrhSdMWWZ5F7Rx+VQr BAOCebM3lxVTCDKOwjY7PY7dShd6cy2FWHwmpOcPr1biucpFR+kcqh2DA1IwDsFp bWyxRXBWK6tHgoB1OYk2q67oC1I+QZMyJ/zPaipbkQJNeq9EJn7es+0M5efDzqS0 lk5kzyJJPh6zT3yUJMDqtLfEuko2g+bkIEzpoz47SFu4AX9LYkw= -----END CERTIFICATE-----Generated at Sun Dec 7 02:14:19 2025 by rpki-client